You can still use Windows 10 connected to the internet. Same safety precautions apply whether you're on Linux or Windows 10.

1. Don't run executables from the internet unless you trust them. Be extra cautious with Windows 10.
2. Close all the open inbound ports in Windows Firewall (you don't need them for anything anyway).
3. Close them all again because FFS WINDOWS I CLOSED THEM FOR A REASON SO STOP OPENING THEM.
4. Use a browser that's still getting security updates, so if you're on Microsoft Edge for some reason then ... nevermind if you're still on Microsoft Edge in 2025 then there's no saving you.
5. Keep physical access restricted. I gave up trying to configure bitlocker but if you can set it up then that'll better resolve this.
6. Keep an eye out for news of critical vulnerabilities, particularly ones that score high in terms of "Base Metrics".

I've also put in a firewall rule that prevents Microsoft Edge from accessing the internet entirely, but that's more out of spite than security. Windows keeps overriding my Firewall settings anyway so I don't think it'll have much of an effect.